๐จ๐ฟ
Prcek
2026-09-16 05:16:26
(23 hours ago)
PortScan:HOST=35.185.44.177,DPORTS=443
Port Scan
Anonymous
2026-09-16 05:15:49
(23 hours ago)
[Wed Sep 16 07:15:31.913883 2026] [proxy_fcgi:error] [pid 56444:tid 56616] [client 35.185.44.177:592 ...
show more
[Wed Sep 16 07:15:31.913883 2026] [proxy_fcgi:error] [pid 56444:tid 56616] [client 35.185.44.177:59202] AH01071: Got error 'Primary script unknown'
[Wed Sep 16 07:15:48.049744 2026] [proxy_fcgi:error] [pid 56443:tid 56547] [client 35.185.44.177:33918] AH01071: Got error 'Primary script unknown'
[Wed Sep 16 07:15:48.154657 2026] [proxy_fcgi:error] [pid 56443:tid 56536] [client 35.185.44.177:33918] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
Anonymous
2026-09-16 04:31:58
(1 day ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
Anonymous
2026-09-16 04:25:52
(1 day ago)
[Wed Sep 16 04:47:57.417641 2026] [proxy_fcgi:error] [pid 56443:tid 56534] [client 35.185.44.177:434 ...
show more
[Wed Sep 16 04:47:57.417641 2026] [proxy_fcgi:error] [pid 56443:tid 56534] [client 35.185.44.177:43464] AH01071: Got error 'Primary script unknown'
[Wed Sep 16 04:47:57.458414 2026] [proxy_fcgi:error] [pid 56442:tid 56546] [client 35.185.44.177:43372] AH01071: Got error 'Primary script unknown'
[Wed Sep 16 04:47:57.600132 2026] [proxy_fcgi:error] [pid 56442:tid 56544] [client 35.185.44.177:43372] AH01071: Got error 'Primary script unknown'
[Wed Sep 16 06:25:51.514619 2026] [proxy_fcgi:error] [pid 56628:tid 56662] [client 35.185.44.177:35394] AH01071: Got error 'Primary script unknown'
[Wed Sep 16 06:25:51.514619 2026] [proxy_fcgi:error] [pid 56628:tid 56662] [client 35.185.44.177:35394] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-09-16 03:05:02
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
Anonymous
2026-09-16 02:47:58
(1 day ago)
[Wed Sep 16 04:47:46.326727 2026] [proxy_fcgi:error] [pid 56628:tid 56669] [client 35.185.44.177:434 ...
show more
[Wed Sep 16 04:47:46.326727 2026] [proxy_fcgi:error] [pid 56628:tid 56669] [client 35.185.44.177:43414] AH01071: Got error 'Primary script unknown'
[Wed Sep 16 04:47:50.017526 2026] [proxy_fcgi:error] [pid 56442:tid 56563] [client 35.185.44.177:43372] AH01071: Got error 'Primary script unknown'
[Wed Sep 16 04:47:57.238537 2026] [proxy_fcgi:error] [pid 56442:tid 56563] [client 35.185.44.177:43372] AH01071: Got error 'Primary script unknown'
[Wed Sep 16 04:47:57.329400 2026] [proxy_fcgi:error] [pid 56628:tid 56667] [client 35.185.44.177:43414] AH01071: Got error 'Primary script unknown'
[Wed Sep 16 04:47:57.350716 2026] [proxy_fcgi:error] [pid 56442:tid 56525] [client 35.185.44.177:43372] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
NXTwoThou
2026-09-16 02:35:40
(1 day ago)
/%2e%2e/.env
Web App Attack
๐ฒ๐พ
Rizzy
2026-09-16 01:50:52
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฉ๐ช
Guardian
2026-09-16 01:13:58
(1 day ago)
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x14), Unauthorized attempt to ret ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x14), Unauthorized attempt to retrieve configuration file (x3)
35.185.44.177 [16/Sep/2026:03:13:57 +0200] "GET / HTTP/1.1"
35.185.44.177 [16/Sep/2026:03:13:58 +0200] "GET /reset-password HTTP/1.1"
35.185.44.177 [16/Sep/2026:03:13:58 +0200] "GET /z9x8c7v6b5-debug-trigger-******.*** HTTP/1.1"
35.185.44.177 [16/Sep/2026:03:13:58 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1"
35.185.44.177 [16/Sep/2026:03:13:58 +0200] "GET /rclone.conf HTTP/1.1"
35.185.44.177 [16/Sep/2026:03:13:58 +0200] "GET /.profile HTTP/1.1"
35.185.44.177 [16/Sep/2026:03:13:58 +0200] "GET /dashboard HTTP/1.1"
35.185.44.177 [16/Sep/2026:03:13:58 +0200] "GET /admin/login HTTP/1.1"
35.185.44.177 [16/Sep/2026:03:13:58 +0200] "GET /forgot-password HTTP/1.1"
35.185.44.177 [16/Sep/2026:03:13:58 +0200] "GET /console HTTP/1.1"
35.185.44.177 [16/Sep/2026:03:13:58 +0200] "GET /@fs/../.env?raw?? HTTP/1.1"
35.185.44.177 [16/Sep/2026:03:13:58 +0200] "GET /backoffice HTTP/1.1"
35.185.44.177 [16/
show less
Port Scan
Web App Attack
๐ซ๐ท
baphomet
2026-09-16 01:12:53
(1 day ago)
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.e ...
show more
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.env/wp-login/xmlrpc/phpmyadmin/.git).
jail=nginx-canary proto=tcp port=80,443 failures>=2 class=web-app-probe
these paths are not real apps on this host; hit is hostile recon
when=2026-09-16T01:12:52Z sensor=fail2ban role=web-canary
src=35.185.44.177
show less
Web App Attack
๐ฉ๐ช
33three
2026-09-15 23:24:09
(1 day ago)
Fail2Ban jail WebAttack triggered
Brute-Force
๐บ๐ธ
Secure Gatewayยฎ๏ธ
2026-09-15 22:00:40
(1 day ago)
Report By Secure Gateway Security Team: Potential CSRF Attack Detected
Hacking
๐บ๐ธ
ALSCOยฎ๏ธ
2026-09-15 22:00:40
(1 day ago)
Report By ALSCO Security Team: Brute Force Login Attempt
Web App Attack
Anonymous
2026-09-15 19:37:43
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ฉ๐ช
tentwentyfour
2026-09-15 18:42:41
(1 day ago)
Blocked for probing for sensitive web application components
Brute-Force
Web App Attack